Shreshth Kumar Email & Phone Number

British Columbia, Canada

Canada

• Managed a small team of two and worked capturing requirements and creating test-cases for our product using Spira framework with Robot framework and Selenium WebDriver.
• Worked closely with Developers to completely understand the details of code design and behavior, and identify edge cases that can cause system failures.
• Created CI/CD pipelines in Groovy to implement processes and tools to enable code analysis and vulnerability assessment of the product.
• Worked on Jenkins (CI/CD) to integrate security analysis of the product into the pipelines and provide advice on vulnerability remediation and risk mitigation.

Fredericton, New Brunswick, Canada

• Involved in various types of testing such as Sanity, Smoke, Integration, UI, Regression, etc. and security testing to assess and prepare a QA scorecard for our product.
• Worked on Jenkins using Groovy to fix the build pipeline and integration-test pipelines. Also integrated Slack with Jenkins to get build updates.
• Used a third-party tool (MindMap) to capture and manage not only the product architecture diagrams but also the complete product requirements which helped the team to identify bottlenecks in the product
• Deployed a video-streaming tool (Wowza) in the internal corporate network which streams live videos from all the IP cameras in the network.

Fredericton, New Brunswick, Canada

• Security Testing
• Installed various Security Assessment tools on a central Kali-Linux server to conduct security assessments for clients.
• Conducted Web-Application Security Assessments against standards like OWASP top 10, NIST top 25, ASVS etc., with security tools like Acunetix, Zed Attack Proxy and Burp suite.
• Conducted Network Infrastructure Security Assessments with security tools including Nessus, Nmap, Metasploit and various open-source scripts.
• Also conducted a phishing simulation for clients to assess the security posture and awareness of the employees. We installed an open-source phishing tool called GoPhish which can simulate phishing exercises in.

India

• Cyber Security Consulting
• Interacted with a diverse clientele on various engagements including internal network assessment (Internal VA/PT), Configuration Review of network devices, and Web-Application Security Assessment (both thick and thin.
• Performed security assessment for the entire technology stack – endpoints, network components, databases, and applications in network-centric assessments, to identify and minimize the security gaps.
• Also worked on engagements including Client Risk Assessments w.r.t. leading standards/guidelines like ISO27001, NIST, PCI-DSS, etc., implementation of security tool(s) and Secure Code Review (Source Code Review).
• Helped in managing PwC’s Cybersecurity lab. My responsibilities included deploying and maintaining high availability of the security tools deployed in the lab to all the team over India. These tools were used to.

Masters, Computer Science

Bachelor'S Degree, Information Technology